Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa
File:                     eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa (raw, json)
Hash identifier:          XEueRqXkomED08+DcgDF+3PvUp1RJzXPqsuFdGvFZGE=
Subject key identifier:   3D:EC:80:C5:5B:DF:79:EC:F6:8A:3F:8B:7F:79:EB:0B:79:4C:9B:9C
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F43285848EC9694FC72EC7E5A82F12080
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        155.63.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:94:fc:72:ec:7e:5a:82:f1:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=4caf1793-f57f-476b-8a8b-2ad8b7bda8ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7c:fe:8e:c9:46:90:f0:ad:6f:6b:36:6d:71:
                    0f:43:7f:f6:fe:a8:d3:ee:81:4f:5b:38:f2:9a:6d:
                    06:da:a7:26:d6:54:f5:a8:2f:aa:1c:9d:0f:1b:0b:
                    96:56:84:ef:3f:2a:25:9a:0b:c2:4f:18:a6:03:4b:
                    c9:e6:2e:90:45:ad:ca:37:41:0b:e9:87:93:8d:2a:
                    57:97:e8:05:b1:61:7a:97:1a:c9:99:fb:ef:02:2e:
                    2b:0d:5d:fc:ce:20:cb:6c:ad:3c:da:bc:21:4b:96:
                    cc:48:46:e2:cd:7a:1b:8a:de:47:7e:07:74:a1:8f:
                    eb:c6:ec:79:57:67:c5:84:4e:7f:b2:66:81:2c:9d:
                    69:52:4e:d0:4a:5c:28:e0:37:c9:c4:1e:a1:1b:39:
                    6d:ca:91:c3:0f:12:b3:ba:c9:9c:27:e3:f5:aa:a3:
                    4c:9c:40:a0:76:1c:86:0a:1a:3c:fb:54:9b:68:bc:
                    79:4c:a1:ad:a8:27:13:6d:5e:22:0d:ec:88:57:a8:
                    c8:50:96:43:91:70:2f:b6:d7:97:9f:26:3c:7e:02:
                    d7:b1:f5:6b:e5:e7:04:06:28:5c:c0:2f:14:1e:25:
                    6c:2b:68:37:ab:87:27:82:b3:36:89:71:95:dd:70:
                    16:6e:08:53:ee:9f:dd:98:d3:40:24:fa:12:f8:4f:
                    5e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:EC:80:C5:5B:DF:79:EC:F6:8A:3F:8B:7F:79:EB:0B:79:4C:9B:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/eafe0940-5c5a-31fe-adf8-4d7bc944edda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:89:ec:b5:4f:88:3f:05:bd:b8:b0:a7:2e:4c:e5:4f:cf:73:
         2a:30:6a:f0:18:7f:a0:0d:79:7a:1c:dc:a4:f2:39:d0:52:8f:
         07:95:5a:4b:20:fa:f3:38:25:98:04:c3:b0:04:d8:32:76:3a:
         7c:2d:8f:d3:1f:d1:69:16:b4:f6:dc:7d:de:fb:26:03:2e:e6:
         b2:ab:89:e1:15:f7:43:46:a0:51:dc:cd:29:2e:7a:bb:35:17:
         8b:67:5a:a2:25:3f:2b:7f:14:02:6f:b6:95:02:cc:c7:0c:1e:
         bc:f6:11:8d:b6:69:50:b4:dd:4e:88:36:1f:6b:e4:36:4d:83:
         84:4f:82:5d:1a:ce:cb:87:c4:2e:c4:01:0f:e8:e3:51:19:f5:
         6f:8e:82:1f:3a:2b:ef:e2:28:b2:6f:44:f0:3f:06:b2:74:fb:
         a6:f0:e6:03:b0:44:26:a5:7e:b0:1c:e7:63:9c:e1:e0:6e:23:
         bb:2c:8e:b4:31:ec:1c:de:0c:e0:91:ad:41:ea:88:18:79:cc:
         e3:dd:4d:10:d6:d1:d7:1a:0e:69:5a:ec:c0:b6:d9:35:4c:87:
         c2:de:66:eb:fa:de:c0:e4:aa:df:31:a9:81:3a:b0:29:53:71:
         42:33:b3:4f:31:c4:13:69:b8:cd:03:43:9a:71:8f:e4:40:e5:
         1c:c9:32:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:58:44 2025 by rpki-client